Function report

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:security\selinux\xfrm.c Create Date:2022-07-28 19:16:41
Last Modify:2020-03-12 14:18:49 Copyright©Brick
home page Tree
Annotation kernel can get tool activityDownload SCCTChinese

Name:selinux_xfrm_skb_sid_ingress

Proto:static int selinux_xfrm_skb_sid_ingress(struct sk_buff *skb, unsigned int *sid, int ckall)

Type:int

Parameter:

TypeParameterName
struct sk_buff *skb
unsigned int *sid
intckall
229  sid_session = unspecified SID
230  sp = skb_sec_path(skb)
232  If sp Then
235  When i >= 0 cycle
236  x = xvec[i]
237  If Returns true if the xfrm contains a security blob for SELinux. Then
238  ctx = Security context
240  If sid_session == unspecified SID Then
241  sid_session = ctx_sid
242  If Not ckall Then Go to out
244  Else if sid_session != ctx_sid Then
245  sid = unspecified SID
246  Return -EINVAL
252  out :
253  sid = sid_session
254  Return 0
Caller
NameDescribe
selinux_xfrm_decode_sessionLSM hook implementation that checks and/or returns the xfrm sid for the* incoming packet.
selinux_xfrm_skb_sid